CYBER CODE RED

Get real-time updates on Telegram

VULNERABILITYOpen Source SecurityP5

CVE-2025-60489 security flaw

Shvedov on Oct 23 Product: GPAC (MP4Box) Affected: 2.5-DEV-rev1692-g23819fdc0-master Commit 23819fdc02be8d3e92f0ef84831625d51981d7d2 Fixed: 4860a1a6f128ccc9ae37b4b738d22029f9672457 CVE: CVE-2025-60489 CWE: CWE-476 (NULL Pointer Dereference) CVSS 3.1: 5.5 MEDIUM (AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Reporter: Alexander A. Shvedov (@sigdevel) Description: MP4Box dereferences a near-NULL pointer in dasher_insert_timeline_entry()...

Published 23-Oct-2026 17:33 UTC · First seen 23-Oct-2026 17:32 UTC

Sources